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Abstract 

We study the strength of set-theoretic axioms needed to prove Rabin’s 
theorem on the decidability of the MSO theory of the infinite binary tree. 
We first show that the complementation theorem for tree automata, which 
forms the technical core of typical proofs of Rabin’s theorem, is equivalent 
over the moderately strong second-order arithmetic theory ACAq to a 
determinacy principle implied by the positional determinacy of all parity 
games and implying the determinacy of all Gale-Stewart games given by 
boolean combinations of S 2 sets. It follows that complementation for tree 
automata is provable from nj- but not Apcomprehension. 

We then use results due to MedSalem-Tanaka, Mollerfeld and Heinatsch- 
Mollerfeld to prove that over IlJ-comprehension, the complementation 
theorem for tree automata, decidability of the MSO theory of the infinite 
binary tree, positional determinacy of parity games and determinacy of 
Boo 1(S2) Gale-Stewart games are all equivalent. Moreover, these state¬ 
ments are equivalent to the Ila-reflection principle for IlJ-comprehension. 
It follows in particular that Rabin’s decidability theorem is not provable 
in Apcomprehension. 


1 Introduction 

Rabin’s decidability theorem m says that the monadic second order (MSO) 
theory of the infinite binary tree {0,1}”' with the left and right successor rela¬ 
tions is decidable. In the words of the book “The Classical Decision Problem” 
[2] , Rabin’s result is “one of the most important decidability theorems for math¬ 
ematical theories and has numerous applications in several areas of mathematics 
and computer science” (for a discussion, see e.g. [U Chapter 7]). 

Unlike other prominent decidability results, such as the ones for Presburger 
arithmetic, real-closed fields or even the MSO theory of (N, <), Rabin’s theo¬ 
rem appears likely to involve significant logical strength, in the sense of being 
unprovable without axioms asserting the existence of very abstract and com¬ 
plicated sets. This is exemplified by the fact that typical modern proofs of 
Rabin’s theorem, dating back to [3, invoke the determinacy of certain infinite 
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games with Borel winning conditions, and determinacy principles are notorious 
for requiring very large logical strength. 

The framework of reverse mathematies (see |19j l offers a natural way of 
measuring the logical strength of a theorem. The idea is that many mathe¬ 
matical theorems can be formalized in the language of seeond-order arithmetic^ 
a foundational axiomatic theory used already by Hilbert and Bernays. The 
most important axiom of second-order arithmetic is the comprehension scheme, 
stating the existence of any set of natural numbers defined by first- and second- 
order quantification over N. Reverse mathematics proceeds by analyzing various 
mathematical statements and proving their equivalence, over a suitable weak 
base theory, to some rather limited form of comprehension. Most mathematical 
theorems analyzed in this fashion have turned out to require no more than the 
theory ACAq allowing only arithmetical comprehension, that is, the existence of 
sets defined without any second-order quantifiers. Theorems requiring strictly 
more than H}-comprehension, or the existence of sets defined in terms of one 
second-order quantifier, are quite exceptional. Such exceptions include the cel¬ 
ebrated graph minor theorem [3], and a theorem in general topology proved 
equivalent to H^-comprehension in |12] . 

Determinacy theorems are a more extreme exception. n(-comprehension is 
barely enough to prove the determinacy of games in which the winning condition 
is the intersection of an open set and a closed set. H^-comprehension proves 
that Fa- games are determined [5D], but can no longer do so for games given 
by arbitrary boolean combinations of Fa sets (essentiallj0 [3]). For arbitrary 
boolean combinations of FaS sets, proving determinacy requires going beyond 
second-order arithmetic, an immensely strong theory in most other respects m- 

The aim of this paper is to analyze, reverse mathematics-style, the logical 
strength of Rabin’s theorem. We first focus our attention on the complemen¬ 
tation theorem for automata on infinite trees, which is the key ingredient in 
typical proofs of Rabin’s theorem and is often simply considered an alternative 
formulation of the decidability result. We prove that the complementation the¬ 
orem is equivalent over ACAq to a determinacy principle intermediate between 
the determinacy of games given by arbitrary boolean combinations of Fa sets 
and the slightly stronger statement that all parity games [5] are positionally 
determineco. Using earlier work on determinacy of Gale-Stewart games, we 
conclude that the complementation theorem is provable in n|- but not H^- or 
even A|-comprehension. 

We then consider Rabin’s decidability result itself. Using the work of [9] , we 
prove that over H^-comprehension, already the statement “the Hg fragment of 
the MSO theory of {0,1}* is decidable” implies determinacy of arbitrary boolean 
combinations of Fa sets, which makes it unprovable in A|-comprehension. On 
the other hand, any version of the decidability theorem that can be stated in 
second-order arithmetic follows from the positional determinacy of parity games, 
and thus also from Hg-comprehension. 

The final part of our work relies on techniques developed in Michael Moller- 
feld’s PhD thesis [TU], which links H^-comprehension with an arithmetical ver¬ 
sion of the ^-calculus. Using a slight strengthening of Mdllerfeld’s results, we 

^The original reasoning presented in [9] applies to Ag sets, but it is easily adaptable to 
the case of boolean combinations of Fa sets. We present this argument in Section [1] 

^The idea of considering the parity acceptance condition for automata in order to prove 
Rabin’s decidability theorem was first proposed in [3]. 
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show that over Il^-comprehension, the complementation theorem for automata, 
Rabin’s decidability theorem, and all the main determinacy principles studied 
in the paper are actually equivalent. Moreover, all these statements are equiv¬ 
alent to a purely logical reflection principle: “all Ilg sentences provable using 
112 -comprehension 8-'^® true” (note that the unprovablity of this priciple in II^- 
comprehension follows from Gbdel’s second incompleteness theorem). 

Our paper is structured as follows. Section [5] presents the necessary back¬ 
ground in reverse mathematics, automata theory and games. In Section |31 we 
characterize the logical strength of the complementation theorem for tree au¬ 
tomata in terms of a determinacy principle. We review some earlier results on 
determinacy principles in Section|4j and then use them to analyze the strength of 
Rabin’s decidability theorem in Section [5] Our final result linking complemen¬ 
tation for automata, decidability of MSO and various determinacy statements 
with a reflection principle for H^-comprehension is discussed in Section |51 

2 Basic notions 

2.1 Second-order arithmetic 

Second-order arithmetic is a natural framework for studying the strength of 
axioms needed to prove theorems of countable mathematics, that is, the part 
of mathematics concerned with objects that can be represented using no more 
than countably many bits of information. The two-sorted language of second- 
order arithmetic, L 2 , contains first-order variables x, y, z, ..., intended to range 
over natural numbers, and second-order variables X, Y, Z, ..., intended to range 
over sets of natural numbers. L 2 includes the usual arithmetic functions and 
relations -f, •, <,0,1 on the first-order sort, and the € relation which has one 
first-order and one second-order argument. 

Full second-order arithmetic, Z 2 , has axioms of three types: (i) axioms stat¬ 
ing that the first-order sort is the non-negative part of a discretely ordered ring; 
(ii) comprehension axioms, or sentences of the form 

VF Vy Vx (x G X o i^(x, Y,y)), 

where (p is an arbitrary formula of L 2 not containing the variable X] (iii) the 
induction axiom, 

VX [0 G X A Vx (x G X ^ X -f 1 G X) ^ Vx (x G X)] . 

The language L 2 is surprisingly expressive, as the first-order sort can be 
used to encode arbitrary finite objects and the second-order sort can encode 
even such objects as complete separable metric spaces, continuous functions 
between them, and Borel sets within them (cf. [THl Chapters II.5, II.6, V.3]). 
Moreover, the theory Z 2 is very strong: almost all theorems from a typical 
undergraduate course that are expressible in L 2 can be proved in Z 2 . In fact, 
the basic observation underlying the programme of reverse mathematics |19] is 
that many important theorems are equivalent to various fragments of Z 2 , where 
the equivalence is proved in some specific weaker fragment, referred to as the 
base theory. 

For relatively strong theorems such as the ones studied in this paper, a 
reasonable base theory is ACAq, the fragment of Z 2 obtained by restricting the 
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comprehension scheme to instances where the formula ip is arithmetical, that 
is, does not contain second-order quantifiers (second-order free variables are 
allowed). Stronger fragments can be obtained by allowing comprehension for p 
with a fixed number of second-order quantifiers. A formula is if it has the 
form 

VAi 3A2 ... QXn V’ 

with tp arithmetical; it is if it is the negation of a Ii!p formula; it is if it 
is equivalent to both a and a formula. The theory IffoCAo is obtained 
by restricting the comprehension scheme to instances where p is In the 
subtheory A^CAo of IlfoCAo, the comprehension scheme takes the form 

VFVy [yx{p{x,Y,y) ^ip{x,Y,y)) => 3X\lx{x & X ^ p{x,Y,y))\ , 

where both p and ip are Ii!p. 

The induction scheme E)j-IND consists of the sentences 

VTVy [p{0,Y,y) A'ix{p{x,Y,y) ^ p{x + l,Y,y)) ^ Vx p{x,Y ,y)] 

where p is or By the induction and comprehension axioms, IlfoCAo 
proves Sfo|ND. On the other hand, IlfoCAo does not prove S)j_|_;^-IND, while 
UrTSj prove nfoCAo even assuming n)j_^-CAo (cf. [T^b 

In this paper, the most prominent theory is II^-CAo. We present some 
important principles provable in II^-CAo. The first two principles are related to 
countable sequences of sets. Such a sequence (Ai)igN can be represented by a 
single set X if we let 

X £ Xi ^ {i,x) G X, 

where {•, •) is some standard pairing function. We write X G if there is 

some i such that X = Xi. 

Definition 2.1. The E 2 axiom of choice, is the axiom scheme consisting 

of sentences of the form 

\/Z\/z\ix3Yp[x,Y,Z,z) 3{Yx):cm'^xp{x,Y^,Z,z)], 

where p js 

Theorem 2.2. (see \19\. Theorem VII.6.9]) II^-CAo b S^-AC. 

A sequence {Xi)i^^ can be regarded as a countable model for the language 
L 2 , with N as the first-order universe and {Ai}igN as the second-order universe. 
Such a model is called a countable coded model and typically denoted M. 

Definition 2.3. A countable coded model M is a /32-model if for allx €N,X G 
M, and each formula p{x,X), 

M \= p{x,X) iff p(x,X) is true. 

(A completely formal version of this definition involves truth definitions for II^ 
sentences and can be found for instance in [TH Definition VII.7.2]). Note that 
any true Ilg sentence remains true in each P 2 model. 

Theorem 2.4. (see FT9l Theorem VII. 6.9 and VII. 7.4]) n^-CAg proves: 

VA 3M [M is a 132-model and X G M). 
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The final principle we have to discuss concerns fixpoints of iterations of 
certain monotone operators. A A 2 monotone operator is given by a pair of II^ 
formulas (p{x, X),'ip{x, X) (possibly with parameters) such that 

VccVX {ip{x,X) -i^(x,X)) 


and 

VXiVA2Vx(Ai QX2hip{x,Xi))^^{x,X2). 

We think of ip and '0 as defining an operator on sets that maps a set X to 
{a: e N : ip{x, A)}. 

Definition 2.5. The axiom scheme A 2 -MI asserts the following for every X\ 
monotone operator given by formulas there exists a prewellordering (re¬ 

flexive transitive relation connected on its field) =4 with field P such that 

yx[x € P ^ X £ : y -< a:})] and T^^^{P) C P. 

If ^, P are as in Definition [131 then P can be regarded as the inductively 
generated least fixed point of 

Theorem 2.6. Theorem 5.1] II^-CAo b A 2 -MI. 

Notational convention. As above, we will use the letter N to denote the 
natural numbers as formalized in second-order arithmetic, that is, the domain 
of the first-order sort. On the other hand, the symbol oj will stand for the 
concrete, or standard, natural numbers. For instance, given a theory T and a 
formula ip{x), “T proves ip(n) for all n € w” will mean “T h i^(0), T h ip(l ),...”, 
which does not have to imply T h Va; £N(/3(a;)”. 

The letter n will be used exclusively to denote elements of uj. As formal 
variables of the first-order sort, we will typically use x,y, z,.. but sometimes 
also i,j, k, i or other lowercase letters different from n. 

2.2 Automata and MSO 

The study of monadic second order logic on the infinite binary tree relies heavily 
on the theory of automata on infinite words and infinite trees. Our presentation 
of automata theory and MSO is based on pT] . 

Given a finite set S (the so-called alphabet), a word over alphabet S is simply 
a mapping / : N —^ E. A tree (or more precisely, labelled binary tree) over E is 
a mapping T:{0,1}*—^-E, where {0,1}* stands for the set of all finite binary 
stringqfj. Note that words and trees over E have another natural representation 
as structures with universe N resp. {0,1}* and card(E) disjoint unary relations 
whose union is the universe. 

Definition 2.7 (Nondeterministic Parity Word Automaton). A nondeterminis- 
tic parity word automaton over a finite alphabet T, is a tuple A= (E, Q, , A, rk) 
where Q is a finite set of states, &Q is the initial state, AGQxHxQ is 
the transition relation, and rk: Q —>■ w is the rank function. 

®In automata theory, a more typical choice of symbols would be w and t instead of, respec¬ 
tively, / and T. However, in this paper we decided to use capital letters to emphasize that 
these are objects of the second-order sort. 
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We use the letter S to denote individual transitions of A, i.e. elements of A. 

A run of a nondeterministic parity word automaton A on a word / over S 
is a labelling p: N —5- A which is consistent, that is for every position i € N in 
/, if p{i) = {qi,ai,qi+i), then 

1. f{i) = Oj, 

2. p(i + 1) = (g,+i,aj+i,(7j+2), 

and qo = q^, that is the first state in the run is the initial state of the automaton. 
Intuitively, the transitions in a run have to be such that after moving from a 
position i to the successor position i + 1, the run continues from the state 
indicated by the transition p{i). 

A run p on a word / is accepting if the states qo,qi, ■ ■ ■ along this run satisfy 
the parity acceptance condition: 

liminf rklfli) is even. 

iGN 

A word / is accepted by the automaton A if there exists an accepting run of 
A on /. 

Definition 2.8 (Nondeterministic Parity Tree Automaton). A nondeterministic 
parity tree automaton over a finite alphabet H is a tuple A= (E, Q, A, rk) 
where Q is a finite set of states, q^ €Q is the initial state, ACQxExQxQ 
is the transition relation, and rk: Q —> N is the rank function. 

If a transition A 9 d has the form {q, a,qo,qi), we may write qo = (i(a, g, 0) 
and qi = 6{a,q, I). The idea is that if the automaton is in some vertex of the 
tree and reads the letter a while in state q, it may use S to move simultaneously 
to the left son of the vertex in state qo and to the right son in state qi. 

A run of a nondeterministic parity tree automaton A on a tree T over E is a 
labelling p: {0,1}*—5-A which is consistent, that is for every vertex v € {0,1}* 
if p{v) = (gt,,a„,g„o,( 7 t,i), then 

1. t{v) = ay, 

2. p{vi) = (qyi, Uyi, qyio, qyii) for i = 0,1, 

and Pe = q^ where e denotes the empty string. Intuitively, the transitions in a 
run have to be chosen so that after moving from a vertex v in the tree to its 
sons vO, ul, the run continues from the states qyo, qyi indicated by the transition 
p{v). 

A run p on a tree T is accepting if for every branch tt G {0,1}^, the states 
along this branch, qT^ioj ■ ■ ■ satisfy the parity acceptance condition: 

liminf rk((7,n.f .) is even. 

iGN ' 

A tree T is accepted by the automaton A if there exists an accepting run of 
A on T. 

Definition 2.9 (Deterministic automaton). We call a nondeterministic parity 
word automaton A = (E, Q, A, rk) a deterministic word automaton if the 
transition relation A is a graph of a function Q x Y, ^ Q. Similarly, we call a 
nondeterministic parity tree automaton A= (E, Q, q^, A, rk) a deterministic tree 
automaton if the transition relation 6 is a graph of a function Q x Y ^ Q x Q. 
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Note that a deterministic word (resp. tree) automaton has exactly one run 
on each word (resp. tree). 

We consider monadic second order logic MSO over the structure ({0,1}*, S'o, 5'i), 
where Sq and Si are the left and right two successor relations, respectively 
{So{v, w) holds iff re = riO and Si{v, w) holds iff w = ril). The language of MSO 
over ({0,1}*, So, Si) contains first-order variables x,y,... ranging over elements 
of {0,1}* and second-order variables X,Y,... ranging over subsets of {0,1}*. 
Atomic formulas have the form x = y, So{x,y), Si{x,y) and x & X. The lan¬ 
guage of MSO has the usual boolean connectives and the quantifiers 3a::, 3X. 

In the language with just the two successors, as opposed to the arithmetical 
language with -|- and •, there is no way to define a pairing function in MSO, so 
the restriction to unary second-order quantifiers is very important. 

2.3 Games 

We will be concerned with games in which winning conditions take the form 
of boolean combinations of S® properties. To talk about arbitrary boolean 
combinations of S® statements, we formalize a version of the so-called difference 
hierarchy over E®. 

Let / be a distinguished second-order variable which is assumed to represent 
(the graph of) a function from N to N. A (£ 2 ) 2 ; formula (p{f) is given by a 
number x and a formula ifiy, /), possibly with other parameters, such that 
for all /, tp{x,f) always holds, and for all z < y < x, if tp{z,f), then ijj{y,f). 

We say that ‘y{f) holds if 

■0(0,/) V 0(2,/) V ... V 0(2[a;/2j,/); 

or formally, if the smallest y < x such that y = xV 'tf{y, /) is even. 

Note that in ACAo a (^2)1 formula is the same thing as a formula, in the 
sense that for every (^ 2)1 formula tpif) there is a II^ formula f{f) such that 
ACAo b yf{(p{f) <=> fif)), and vice versa. Similarly, a (E 2 )a;+i formula is the 
same thing as the disjunction of a II^ formula and a negated (E^jx formula. So, 
our class (E^jx is dual to the usual x-th level of the difference hierarchy over 
E 2 . It is a matter of routine if tedious verification that every concrete boolean 
combination of E 2 properties can be expressed by a (E^)™ formula for some 
n G UJ. 

A ( 112 ) 2 : Gale-Stewart game (briefly, a (S^jx game) is given by a (E^jx 
formula g^{f), again, possibly with other parameters (in accordance with the 
conventions from descriptive set theory, the boldface font serves precisely to 
indicate the possible presence of parameters). The game is played by two play¬ 
ers, 0 and I, who alternately choose natural numbers /(O), /(I),..., building an 
infinite sequence / € Player 0 wins the game if (p{f) holds, and player 1 
wins otherwise. The notions of a strategy and winning strategy for each player 
are defined as usual. The game given by '•p{f ) is determined if one of the players 
has a winning strategy. For precise definitions, see e.g. [7]. 

Definition 2.10. (S 2 )x-Det is the n| sentence “all (S 2 )x games are deter¬ 
mined”. 

(S^jx-Det* is the same statement restricted to games in the Cantor space 
{0,1}^ instead of the Baire space N^, that is to games where the players are 
required to choose only numbers from {0,1} in each move. 
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Obviously, (S 2 )a:"Det implies (S 2 )a:"Det*. On the other hand, it easily 
follows from [T31 Lemma 4.2] that, provably in ACAg, (S 2 ) 2 ^+i"Det* implies 
(S 2 ) 2 :-Det. So, we have: 

Proposition 2.11. Va;[(S 2 ) 2 ^“Det] and Va:[(S 2 ) 2 ^“Det*] are equivalent in ACAq. 

A parity game of index (0,a:) is a tuple G = (V 3 , Vy, u/, A, rk), where: Vg 
and Vv are disjoint sets with union V := V 3 U Vy; u/ is an element oiV\ E C-V^ 
is such that for every v (£ V there is some w with {v,w) G E; and the rank 
function rk is a function from V to {0,..., a:}. The game is played on the arena 
V by the two players 3 and V. The game starts in the initial position vj; and if 
it reaches position v G Vp, p G {3, V}, then player p moves to some w such that 
{v,w) G E. Formally, a play of G is a sequence (ui)igN such that vg = vi and 
{vi,Vi+i) G E for all i. Player 3 wins the play exactly if 

liminfrk(ui) is even. 

leN 

(S 2 )a;"Det implies that all parity games of index (0, a:) are determined. How¬ 
ever, we also need a stronger notion of determinacy. A positional strategy (also 
known as a memoryless, or forgetful, strategy) for 3 (resp. V) is a function cr 
from V 3 (resp. Vy) into V such that for all v in the domain, {v,a{v)) G E. A 
positional strategy cr is winning if the player using a wins every play consis¬ 
tent with cr. The game G is positionally determined if one of the two players 
has a positional winning strategy. Basic notions related to parity games come 
originally from [3]. 

Definition 2.12 (Tree-like parity games). A parity game G is tree-like ifV = 
{ 0 , 1 }^^, V 3 = € if iff w = vO or w = vl. 

Our notion of (S^)^ formula was chosen to make the proof of the following 
lemma rather straightforward. 

Lemma 2.13. ACAq proves that for every x, (I] 2 )a;-Det* holds if and only if 
all tree-like parity games of index ( 0 , a:) are positionally determined. 

Proof. Clearly, a tree-like parity game is determined iff it is positionally deter¬ 
mined. Moreover, such a game of index (0,x) can be thought of as a (S^)^ 
Gale-Stewart game in the Cantor space given by x and the formula 

■= ^z<yVi3j>i{ik{f\j) = z). 

Note that is H^ in ACAq. This proves the left-to-right direction. 

In the other direction, consider a (S^)^ Gale-Stewart game given by the H^ 
formula f’{y,f). By a normal form result for H^ analogous to the normal form 
for E]* presented as Theorem II.2.7], we may assume that 4’{y,f ) has the 
shape 'iz3u5{y,z,u, f\u) with all quantifiers in 5 bounded by u. Define the 
tree-like parity game of index ( 0 ,a;) by letting rk(/|'i) equal the smallest such 
y < X that for some j, 

\lz<j3u<i5{y,z,u, f\u) 

holds, but the number oi k < i with rk(/['i) = y is strictly smaller than j. If 
there is no such y, let rk(/ (i) equal x. It is easy to verify in ACAq that for every 
/ G { 0 , 1 }^, liminfirk(/|'i) is exactly the smallest y such that y = xV 'f{y,f). 
Thus, determinacy of the parity game implies determinacy of the game given 
by X and if. □ 


3 Complementation 

In this section, we study the logical strength of the complementation theorem 
for tree automata. We prove that the theorem is equivalent to a determinacy 
principle intermediate between Va;[(S 2 )a^"Det] and the positional determinacy 
of all parity games. The somewhat technical definition of the class of games ap¬ 
pearing in the principle is abstracted from the so-called Automaton-Pathfinder 
games appearing quite naturally in the proofs of Rabin’s theorem (see e.g. [H]). 

The proof of our characterization works in ACAq and, unlike the proofs in 
later sections of this paper, does not rely on any earlier results related to the 
logical strength of determinacy principles. 

Definition 3.1. A parity game G is almost tree-like ifV = {0,1}* x {0,..., fc} 
for some fc € N, V 3 = ^ {0, ...jfc}, and {{v,i), {w, j)) € E implies 

{w = vO V w = ul). 

Theorem 3.2. The following are equivalent over ACAq: 

(1) all almost tree-like parity games are positionally determined, 

(2) for every tree automaton A there exists a tree automaton B such that for 
any tree T, B accepts T iff A does not accept T. 

From Theorem 13.21 and Lemma [2. 131 we immediately get: 

Corollary 3.3. ACAq proves the implications (1) => (2) and (2) => (3) for: 

( 1 ) all parity games are positionally determined, 

( 2 ) for every tree automaton A there exists a tree automaton B such that for 
any tree T, B accepts T iff A does not accept T, 

(3) Va:[(S 2 )a:"Det], or equivalently, all tree-like parity games are positionally 
determined. 

The remainder of this section is devoted to the proof of Theorem 13.21 

Proof of Theorem \3.A (1) => (2). We formalize a standard proof of the com¬ 
plementation theorem for tree automata, similar e.g. to the one in [21j . Let 
A = {Syi, A^, rk_ 4 } be a parity tree automaton. We may assume 

w.l.o.g. that for each a S q S there is at least one transition in Aa of 
the form {q, a, •, •). This is because A can be easily modified so as to satisfy this 
condition without changing the class of accepted trees. 

Given a labelled binary tree T, consider the following game Ga,t between 
two players, Automaton and Pathfinder. The set of Automaton’s positions is 
{ 0 , 1 }* xQa, with (0, qjf) the starting position, while the set of Pathfinder’s posi¬ 
tions is {0,1}* X Aa- Given a position (w, q), Automaton can choose a transition 
from q, that is, move to the position {w,S), where A _4 5 S = {q,T(w),qo,qi). 
Pathfinder responds by deciding which direction to take from w, that is, by 
moving either to position {w0,qo) or to {wl,qi). A play of the game induces a 
sequence of states S (Q. 4 )^, and Automaton wins if and only if 

liminf rk_ 4 (( 7 i) is even. 
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Note that because of the assumption that A has at least one transition from 
every letter and state, can easily be formalized as an almost tree-like 

parity game. 

Gj\^t is defined in such a way that A accepts T if and only if Automaton 
has a positional winning strategy. Thus, by positional determinacy, A does not 
accept T if and only if Pathfinder has a positional winning strategy in Ga,t- 

Let S be the (finite) set of all maps from A _4 into {0,1}. Note that a 
positional strategy for Pathfinder can be represented as a labelled binary tree 
S such that S{w) S S for all w € (0,1}*. The strategy is winning if for any 
choice of transitions (du,)u,g{o,i}» consistent with the labelling of T, the ranks 
of states of A appearing on the path determined by S and {(5,u)u,g{o,i}* do not 
satisfy the parity condition. 

We will construct an automaton B which accepts a tree T if and only 
Pathfinder has a positional winning strategy in G^^t- The construction of B 
proceeds in four standard steps, of which three are elementary and one invokes 
McNaughton’s determinization theorem for word automata (0), discussed sep¬ 
arately below. 

In the first step of the construction we build a deterministic word automaton 
Ai which accepts all infinite words ((si, ai,Si, 7J'i))ieN & {S x x x {0,1})^ 
such that if 

Vf GN(si(di) = TTi) (*) 

and if we define 


go = Qa 

di+l — Qiy 

then either at some point qi^i cannot be defined (i.e. Si is not a transition from 
state Qi and letter a^) or 


liminf rk^(gi) is odd. 

zGN 

The set of states of Ai is Qa U (Tj, where rk^^(g) = rk^(g) -|- 1 for q G Qai 
and T is an additional accepting state (i.e. with rank 0). The transitions are 
defined in the natural way, except that whenever the rule Q is violated or 
cannot be defined, we redirect the computation to state T. 

In the second step we consider the following property of infinite words 
((si,ai, 7ri))igN G (5 X X {0,1})”: for every sequence ((5i)ieN G (A^)”, 
the word ((si,ai,Si,'^i))ieN is accepted by Ai. Note that thanks to the fact 
that Ai is deterministic, the complement of this property is recognized by a 
nondeterministic word automaton. By determinization of word automata (0, 
see below) we can find a deterministic parity word automaton A 2 recognizing 
this property. 

In the third step we define a tree automaton A 3 over the alphabet 5 x A 
such that a tree {S,T) is accepted if for every infinite path tt G {0,1}”, if 
((si,ai))ieN is the sequence of labels appearing on this path, then the infinite 
word {{si,ai, '!ri))i^^ is accepted by the automaton A 2 - So, A 3 accepts (S', T) iff 
S encodes a positional winning strategy for Pathfinder in Ga,t- The states of 
A 3 are the same as those of A 2 , and defining the transition function is unprob¬ 
lematic thanks to the fact that A 2 is deterministic. 
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Finally, in the fourth step we define the nondeterministic tree automaton B 
as accepting a given tree T over if there exists a labelling S: {0,1}* —)• S 
such that the tree {S, T) is accepted by ^ 3 . During its computation on T, B uses 
nondeterminism to “guess” the labels S{w) for w G {0,1}*. By construction B 
accepts T iff Pathfinder has a positional winning strategy in Ga,t- 

Determinization of word automata. To complete the proof of (1) (2), we 

need to make sure that ACAq + ( 1 ) is able to prove that McNaughton’s result 
[5] that every nondeterministic word automaton is equivalent to a deterministic 
automaton. In fact, this is provable in ACAq and does not require the full power 
of ACAq. 

The determinization of a nondeterministic word automaton with a parity 
condition proceeds in two steps. The first is to replace the original automaton 
by a nondeterministic Biichi automaton (i.e. with index (0,1)). This is straight¬ 
forward: assume that the original automaton, say A, has index ( 0 , x), so that A 
accepts a word if it has a computation in which the lim inf of ranks of states is 
some odd number y < x. The Biichi automaton B behaves like A, except that 
it additionally uses nondeterminism to do two things. Firstly, in the very first 
transition it guesses the value of y. Secondly, at some point in the computation 
it guesses that states with rank > y will no longer appear; from that point 
onwards, it assigns rank 0 to states with rank y in A, rank 1 to states with rank 
< y in A., and aborts the computation if A wants to enter a state with rank 

> y- 

It remains is to build a deterministic parity word automation simulating a 
nondeterministic Biichi word automaton B. This can be carried out by means of 
the Safra construction, originally due to HZ]. This is a sophisticated refinement 
of the classical power set construction used for finite word automata (on finite 
words, a nondeterministic automaton with set of states Q can be simulated by 
a deterministic automation with set of states 'P{Q)). In the Safra construction, 
the states of the new deterministic automaton are certain (bounded-size) 
trees with vertices labelled by letters from a certain fixed finite alphabet. The 
combinatorial details of the construction are a little involved, but the logical 
strength engaged is quite modest. The construction of T) from B is completely 
elementary, the proof that acceptance of B implies acceptance of T) requires 
nothing beyond defining number sequences by recursion with an arithmetical 
condition in the recursion step, and the other direction additionally makes use 
of Konig’s Lemma in the form known as weak Konig’s Lemma, WKL; all this 
is well-known to be readily formalizable in ACAq. (For details of the Safra 
construction, see e.g. [T4l|2T0.) 

Remark. We have not attempted a careful verification, but we believe that 
the proof of determinization for word automata goes through in the fragment of 
ACAq known as WKLq extended by the induction scheme for E 2 formulas. With¬ 
out E 2 induction, the basic notions of automata theory on infinite structures 
make little sense, in particular the lim inf of ranks appearing in a computation 
might not exist. 

(2) => (I). For any fixed x,k G N, we can represent almost tree-like parity 
games with index ( 0 , x) and arena { 0 ,1}* x { 0 ,..., fc} by labelled binary trees 

'^The proof presented in m yields a deterministic automaton with the so-called Rabin 
acceptance condition, which can be simulated without difficulty by a parity condition; the 
modified construction of leads directly to a deterministic parity automaton. 
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over a suitable alphabet Sa;,fe. The label of a node v in such a tree lists the 
ranks of all positions {v,i) and lists all pairs {{v,i),{vO,j)) and {{v,i),{vl,j)) 
in E. Thus, should contain (x + 1)^+^ • symbols. 

Assume -i(l) and let x G N be such that there is an undetermined almost 
tree-like parity game with index ( 0 , x), set of positions { 0 , 1 }* x { 0 ,..., fc} and 
edge relation E such that {{v, i), {w,j)) G E implies w = vb for some b G {0,1}. 

A tree over representing a game G has the property ^ (resp. 
if 3 (resp. V) has a positional winning strategy in G. Note that both ^ 
and Wqx: k be expressed by MSO sentences with 4 blocks of quantifiers. For 
instance, the sentence expressing Wq ^ is the prenex normal form of 


35'i ... 3StVPi ...\/Pr 


a(5,P)V V l32y{S,P) , 

0<y<lx/2i 


where the S”s represent a positional strategy for player 3, the P’s represent 
potential plays of the game, a is a purely existential first-order formula stating 
that the play P is inconsistent with the strategy S, and each p 2 y is an V3 V 3V 
first-order formula stating that 2 y is the lim inf of ranks appearing in the play 
P. The sentence expressing ^ k is defined analogously. 

Now assume (2). It is routine to verify in ACAq that any quantifier-free 
expressible property of labelled trees is recognized by a nondeterministic tree 
automaton. The usual argument by induction on formula complexity (see e.g. 
EB Theorem 6.7, cf. Theorem 3.1]), using (2) in the step for -i and the nonde¬ 
terminism of automata in the step for a block of second-order 3’s, proves that 
every property of labelled trees expressible by an MSO sentence with at most 5 
quantifier blocks can be recognized by a tree automaton. Hence, for any fixed 
x,k there is an automaton Ax,k recognizing A ~'Wq ^ It remains to 

show that this implies ( 1 ). 

A labelled tree T is regular if there is some bound d G N with the follow¬ 
ing property: for every vertex v G {0,1}* there exists w G {0, such that 
the subtree of T under w is the same as the subtree under v, that is, for all 
u G {0,1}*, T(vu) = T(wu). We complete the argument by proving two lem¬ 
mas about regular trees which together immediately imply that Ax,k cannot 
accept any tree, and therefore (1) holds. The first lemma expresses a com¬ 
pletely standard fact, whereas the second is interesting only in a context where 
positional determinacy of parity games is not known in advance. 

Lemma 3.4. ACAq proves that any tree automaton which accepts some tree 
also aecepts a regular tree. 

Proof. Let A be a tree automaton of index (0, x). Consider the following parity 
game G^- The game arena is split into V 3 = Qa and Vv = A _4 with as the 
initial position. When the game is in position q G Qai player 3 moves to some 
S G Aa of the form {q, a, q', q”) for some a G S^, q', q" G Qa- Now the game is 
in position 6 , and player V decides whether to go left or right, that is, moves to 
either q' or q". Player 3 wins if lim inf of ranks of states visited during the play 
is even (formally this is achieved by setting the ranks of all S G A a to x). 

The positional determinacy of parity games on finite arenas is known to be 
provable even in S'!, a very weak subtheory of ACAq [1]. Moreover, if A accepts 
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some tree T, then player 3 clearly has a winning strategy in A, and thus also 
a positional winning strategy, say cr. Now construct a labelled tree in the 
following way: to determine the label T{w) for w G {0,1}*, simulate a play of 
in which 3 plays according to a, V chooses directions so as to reach w, and 
for each i < lh(ri;) the label T{w\i) is chosen to correspond to the transition <5 
chosen by 3. is accepted by A because cr is a winning strategy. Additionally, 
Ter is a regular tree because has a finite arena and cr is positional. □ 

Lemma 3.5. ACAq proves that for each x and k, the almost treelike parity game 
represented by a regular tree T over is determined. 

Proof of Lemma \3.5\ Let T be a regular tree over encoding an almost tree¬ 
like parity game G. Define U to be the set consisting of those v G {0,1}* for 
which there is no w length-lexicographically smaller than v such that the lengths 
of V and w are congruent mod 2 and T{vu) = T{wu) for all u (the additional 
congruence condition is needed to distinguish between moves of different play¬ 
ers). The formula defining U is arithmetical, so U is indeed a set. Moreover, 
since T is regular, the set U is hnite. 

Consider the following parity game H with arena V := U x {0, ... ,k}- The 
assignment of positions to players and the ranks of positions are inherited from 
G. A move from {v,i) to {w,j) is possible in H if and only if the subtree of 
T under w is identical to the subtree under a son vb of v and the label T{v) 
indicates that a move from (u,f) to {vb,j) is possible in G. The game H exists 
by arithmetical comprehension. By positional determinacy of parity games on 
finite arenas, H is positionally determined provably in ACAq. Let uh be a 
positional winning strategy for one of the players, say 3. 

We can use an to define a positional strategy ac in the game G represented 
by T: at position (u,j), player 3 finds the unique vertex w € U such that the 
lengths of w and v are congruent mod 2 and T under v is the same as T under 
w, and then moves from (u, i) analogously to the move <jh would make at (w, i). 
The strategy erq exists by arithmetical comprehension, and since any play of G 
consistent with cro corresponds to a play of H consistent with cr//, ac is in fact 
a winning strategy for 3 in G. □ 

The proofs of the Lemmas conclude the proof of Theorem 13.21 □ 

4 Determinacy vs comprehension 

We now turn our attention to the question which set-theoretic existence axioms 
are needed to prove the determinacy statements considered in Theorem 13.21 
and Corollary 13.31 For the statement Va:[(S 2 ) 2 ,-Det], sharp upper and lower 
bounds on the requisite amount of comprehension follow from earlier work on 
determinacy statements in second-order arithmetic, most importantly [T0lli[9]. 

We begin with the upper bound. The following result is a direct corollary of 
the proof of Theorem 4.3 in [5]: 

Theorem 4.1 ([5]). ACAq 3-A}-MI-|-Eg-IND h Va:[(S 2 )a:"Det]. 

By Theorem 12.61 it follows that Va:[(S 2 )x-Det] is provable from B^-CAq 3- 
E|-IND, and hence also from n|-CAo. In fact, it is known that Bg-CAo already 
suffices to formalize Davis’ proof of Sg determinacy. 
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On the other hand, XI^-CAq by itself can only prove a smaller amount of 
determinacy: 

Theorem 4.2 ([5], relying heavily on m)- Over ACAq, the theory 

{(S2)n-Det : n G w} 

implies all the If} consequences o/fl^-CAo- 

In fact, the methods of [10] can be used to prove a strengthening of Theorem 
We state the stronger version, accompanied by a proof sketch, as Theorem 
16.11 below. 

Theorem 14.21 and a standard argument imply the following corollary, which 
is proved exactly as the formally slightly weaker Theorem 5.6 in |^: 

Corollary 4.3 (essentially in |9]). Ag-CAo 1/Vx[(S 2 )a;“Det]. 

Proof sketch. Ag-CAo is n 4 -conservative over II^-CAo, so it suffices to show that 
Vx[(S 2 )a;-Det] is unprovable in II^-CAo. 

By Theorem 12.41 II^-CAo proves the existence of a ,52-model. Since every 
true n| sentence remains true in a /32-model, for every n| sentence (p we have: 

n^-CAo h Con((/5), 

where Con is a formalized consistency statement (cf. [HI Corollary VII.7.8.2]). 

Now apply this to ACAq A Va:[(I] 2 )£c-Det] as p (ACAq is well-known to be 
axiomatizable by a single II^ sentence). If (p were provable in II^-CAo, then also 
Con((/?) would be provable. But Con((/3) is n)*, so by Theorem l4.2l it would follow 
from ACAq -I- (S 2 )n-Det for some n G w, and hence from p itself. The theory 
ACAq -f Va:[(S 2 )a;-Det] would then contradict Godel’s second incompleteness 
theorem. □ 

Therefore, Va:[(S 2 )a;"Det], and by Theorem 13.21 also the complementation 
theorem for tree automata, is provable from Ilg- but not Ag-comprehension. 
On the other hand, the argument used to prove Theorem 4.2 in [3] gives: 

Theorem 4.4 ([S]). ACAq -t- A^-MI, and thus also II^-CAo, proves (S 2 )ra-Det 
for all n G w, as well as 

Va; ((S 2 )a;-Det ^ (S 2 )x+i-Det). 

Corollary 4.5 ([9]). ACAq-)-A^-MI, and thus also B^-CAq, proves (S 2 )re“Det* 
for all n G w, as well as 

Vx((S°),-Det*^(S°),+i-Det*). 

Proof. This follows immediately from Theorem 14.41 (S 2 ) 2 :-Det =4^ (S 2 )a;-Det*, 
and (S°)^+i-Det* =A (S°),,-Det. □ 

We now turn to the positional determinacy of parity games. Of course, by 
Proposition [231] and Lemma B. 131 Va:[(S 2 ) 2 :-Det] is equivalent to a special case 
of the positional determinacy of parity games, so the lower bounds on provability 
of Vx[(S 2 )a:"Det] remain valid also here: the positional determinacy of all parity 
games is not provable in Ag-CAg. The lemma below shows that also the upper 
bound of n^-CAo + Eg-IND, and a fortiori Ilg-CAo, remains valid. 
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Lemma 4.6. For each n G uj, H^-CAq proves that parity games of index (0,n) 
are positionally determined. Moreover, II^-CAo proves that for every x, if parity 
games of index ( 0 ,x) are positionally determined, then so are parity games of 
index ( 0 , x + 1 ). 

Remark. Our proof of Lemma 14.61 is again the formalization of a standard ar¬ 
gument in the spirit of the one presented in |21] . We strongly believe that the 
MedSalem-Tanaka argument showing Theorem 14.41 can be adapted to give a 
proof of the step from (0,x) to (0,x -I- 1) in ACAq -I- A^-MI, but we have not 
attempted to do it. 

Proof. Since parity games of index (0, 0) are trivially positionally determined, it 
is enough to prove the second part of the statement. So, assume that all parity 
games of index (0, x) are positionally determined and let G = {Vi, Vy, vj, E, rk) 
be a game of index (0, x-k 1). For each v GV,we will write to denote a game 
defined just like G but with starting position v instead of vj. Il^-comprehension 
guarantees the existence of the set 

Wy = {v : player V has a positional winning strategy in Gy}. 

Let 17 be Id \ bVy. Our aim is to prove that player 3 has a positional winning 
strategy in Gy for each v G U. Of course, this will in particular imply the 
positional determinacy of G. We first prove a useful claim. 

Claim. Player V has a single positional strategy cry which is winning in each Gy 
for v G IVy. Moreover, each play of Gy, v G Wy, consistent with cry never leaves 

Wy. 

To see that the claim is true, note that by Theorem [221 we can apply S^-AC 
to conclude that there exists a sequence of positional strategies (cr„)„gvVv such 
that ay is winning for p in Gy. IlJ-comprehension implies the existence of a 
sequence (Uv}veWv such that for each v, 

Uy = {w G IVy : ay, is winning for V in Gy}. 

Observe that Uy is nonempty for each v G ITy. Now define cry(x), v G IVy O Vy, 
to be ay,(v) for w = min(C7„); for v ^ Wy, define cry(x) arbitrarily. Given a play 
{vi)i^fi consistent with cry and such that vq G Wy, we can prove by induction on i 
that Vi G Wy and that the sequence (min(17t,J)igN is nonincreasing. Thus, from 
some round i onwards the play is actually consistent with some fixed strategy 
ay, which is winning for V in Gy,. This proves the Claim. 

Note that for w G 17 O Vy, all edges from v must lead to vertices in U. The 
Claim also implies that for x G 17 fl V 3 , at least one edge from v must lead to a 
vertex in 17. 

Let N be the set U nrk“^[{0}]. Consider the following formula ip{x,X)\ 

X GU f\[x G N y X G X 

V (x G V 3 and there exists an edge from x into X) 

V (x G Vy and all edges from x lead into 77).] 

Since ip is A 2 (in fact, arithmetical) and contains only positive appearances of 
the variable X, Theorem 12.61 implies the existence of the inductively generated 
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least fixed point P of the operation X M- {a; € N : i^{x,Xy}, along with a 
prewellordering ^ such that P is the field of =:j and x £ P (f{x, {y ■ y a:})- 
Note that 3 has a positional strategy tt on P\N such that tt guarantees reaching 
a vertex in N in finitely many steps and staying inside P until that happens. 
The strategy is defined by: 7r(w) = the smallest w such that w v (this is 
well-defined on P\N unless iV = 0, in which case P = 0 as well). 

Now let P be t7 \ P. Note that for u £ P n Va, all edges from v must lead 
to vertices in Wy U P, while for u € P fl Vy, at least one edge from v must 
lead to a vertex in P. So, it makes sense to consider the parity game Gf/j 
obtained by restricting G to the induced subgraph on P. All vertices in P have 
ranks from {1,..., x -|- 1}, so by the inductive assumption each game (G|'fl)„ 
for w € P is positionally determined. It is not hard to check, using the Claim, 
that a positional winning strategy for V in (G|'ii)i, would also give a positional 
winning strategy for V in Gy, so in fact it is player 3 who wins each (Gt/j)!,. 
By an obvious analogue of our Claim for (G|'/i)«, this means that 3 has a single 
positional strategy p which wins (G|'i{)j; for each v £ R. 

Define a positional strategy era for 3 as follows: 

{ Tr{v) V £ P \ N, 

p{v) V £R, 

arbitrary outside Wy v £ N, 

arbitrary v £ Wy. 

It is easy to verify that for each v £ U, is winning for 3 in Gy. □ 

5 Decidability 

Theorem l3.2l combined with the results discussed in Section SI leads to an easy 
argument showing that II^-CAo is not only unable to prove the complementation 
theorem for tree automata, but also unable to prove the decidability of the MSO 
theory of the infinite binary tree by any other method. 

Theorem 5.1. ACAq proves the implications (1) => (2„), n £ uj, and B^-CAq 
proves the implications (2„) (3), a; 9 n > 3, where: 

(1) all parity games are positionally determined, 

(2„) there is a Turing machine t which halts on every input and accepts exactly 
the sentences of MSO true in ({0,1}*, Sq, Pi), 

(3) Vx[(S°),-Det]. 

Remark. In an “ideal version” of Theorem oi the statements (2„) would be 
replaced by a single statement (2): “there is a Turing machine i which halts on 
every input and accepts exactly the sentences of MSO true in ({0,1}*, So, Pi)”. 
However, by Tarski’s theorem on the undefinability of truth, the natural way of 
expressing “sentence p is true in ({0,1}*, Pq, Pi)” as a property of the variable 
ip cannot be formalized in the language of second-order arithmetic. On the 
other hand, it is possible to formulate a truth definition for sentences, in 
particular for sentences of MSO; as Theorem 15.11 shows, the case n = 3 is 
crucial here. 
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Remark. With some modifications, the technique used to prove the theorem 
could also be employed to show that over II^-CAo, each statement ( 2 „) for 
(jj 9 n > 3 is exactly equivalent to the positional determinacy of almost treelike 
parity games. However, in the next section we prove a more general result using 
a different approach. 

Proof. Both directions of the proof rely on ideas similar to those in the proof of 
(2) => (1) of Theorem 13.21 

(1) => (2n). By Corollary 13.31 (1) implies the complementation theorem for 
tree automata. Moreover, the implication goes through in ACAq. 

Just like in the proof of (2) => (1) of Theorem l3.21 complementation for tree 
automata makes it possible to formalize the usual algorithm constructing an 
automaton equivalent to an MSO formula ip on all labelled binary trees. Given 
a fixed n € uj, the correctness of this algorithm restricted to ip G H^ is easily 
verified in ACAq. 

It remains to have a procedure to deciding whether a given tree automaton 
A accepts any tree at all. This is equivalent to the problem whether player 3 
wins the game described in the proof of Lemma 13.41 and determining the 
winner of a parity game on a finite arena is a decidable problem provably well 
within ACAq [T]. 

( 23 ) ^ (3) For each x € N, there is a Hj MSO sentence expressing the 
positional determinacy of treelike parity games of index (0,a:). Modulo minor 
technicalities, tpx is “for all labellings using labels from either Wqx:o 

Wo,a:,o holds”, where T,x,k, W^,x,k are as in the proof of Theorem 13.21 

By Lemma [2.131 tpx is true in {0,1}* exactly if (S 2 )a:"hlet* holds. 

Let t be a Turing machine given by (2). For each x, t{tpx) = yes exactly 
if (S 2 )a;-Det* holds. Therefore, by Corollary 14.41 i{tpo) = yes and for every x, 
Ki’x) = yes implies t{tpx+i) = yes. 

By arithmetical comprehension, the set X = {x '. t(tpx) = yes} exists. Since 
X contains 0 and is closed under successor, we conclude that X = N. Therefore 
each tpx is true in { 0 , 1 }* and so we have Va;[(S 2 )a;-Det]. □ 

6 Rabin’s theorem as a reflection principle 

Our aim now is to prove that over H^-CAq, Rabin’s decidability theorem, com¬ 
plementation for tree automata, and the determinacy statements appearing in 
Theorem 13.21 and Corollary 13.31 are actually all equivalent. Furthermore, all 
these statements are equivalent to a logical reflection principle stating that all 
n| sentences provable in H^-CAq are true. 

Our proofs in this section rely in an essential way on both the results and 
the techniques of Mdllerfeld’s thesis m- At present we see no way of avoiding 
reliance on these advanced techniques. 

To achieve this, we first notice that slight changes to the argument of m 
yield a strengthening of Theorem 14.21 

Theorem 6 . 1 . Over ACAq, the theory 

{(S2)„-Det : u G wj 

axiomatizes the n| consequences of H^ -C Aq . 


17 




Proof sketch. There is a well-known correspondence between sufficiently strong 
fragments of second-order arithmetic and weak systems of set theory formulated 
in the usual set-theoretic language Lg (cf. for instance [lU Chapter VII.3]). Lg 
is translated into L 2 by letting the G-structure of sets be represented by well- 
founded trees in N^. The inverse translation is the obvious one: 3x becomes 
3a: and 3X becomes 3a: Cw®®*. (Here we use the symbol w®®* for the usual 

set-theoretic definition of the natural numbers as formalized in Lg. This should 
not be confused with our use of lo in the earlier sections.) 

H^-CAq corresponds to the set theory Lim(^i), which consists of the basic 
axioms known as BT’’ (extensionality, pair, union, Ao-separation, and set foun¬ 
dation) and the axiom Va:3y [a: G y A y V], where y V means: “y is a 
transitive set, and for all a G y and Ei formulas tp (of Tg), p(a) iff y |= <p{a)”. 

Now assume that H^-CAq proves the n| sentence tt. It follows that Lim(Ai) 
implies the set-theoretic translation tt* of tt. As written, tt* is a Ha sentence of 

Lg: 

Vx C w=®*3y C C uj"^^S{x, y,z), 

with 6 a bounded formula of Lg. However, Lim(Aa) proves the so-called Ax¬ 
iom /3, which is a variant of the Mostowski collapse lemma: it states that any 
transitive relation r on a set a can be homomorphically mapped onto the set 
membership relation on some set b. (A statement of Axiom /3, and a sketch of 
a proof in a subtheory of Lim(Aa), can be found for instance in [T5j Chapter 
11.6].) Because of this, the H} subformula of tt*, \/z C w®®*(5(x, y, z), which is 
equivalent to the statement that a certain relation parametrized by x, y is 
well-founded, can provably in Lim(Ai) be rewritten in a Si way: “there exists a 
Mostowski collapse of r^^y” ■ Furthermore, the existence of a Mostowski collapse 
of r^^y implies the well-foundedness of already in the weaker theory BT’’ 
(thanks to the set foundation axiom). What this means is that there is a n 2 
sentence tt* such that 


Lim(-<l) h TT* TT* 

BT’’ h ^ TT*. 

By [TUI Theorem 10.4], every n 2 sentence of Lg provable in Lim(-<i) is also 
provable in a certain extension BTcr’’ of BT^. In particular, BTcr'’ proves tt* and 
therefore also tt* . However, by [TOl Theorem 8.15], every L 2 sentence whose 
translation is provable in a theory Ref D BTcr’’ is itself provable in an arithmetic 
version of the /i-calculus, which by |5] is in turn conservative over ACAq 3- 
{(S 2 )n-Det : n G uj}. □ 

Even though Theorem 16.11 concerns relatively strong theories, the work in 
[iiio] involved in its proof relies only on (sketches of) explicit primitive recur¬ 
sive constructions of proofs in various formal theories and, at one point, the 
cut elimination theorem for first-order logic. Therefore, we have the following 
corollary of the proof. 

Corollary 6.2. Primitive recursive arithmetic, and thus a fortiori H^-CAq, 
proves that the theory 

ACAo 3-{(S°),,-Det : X G N} 
axiomatizes the Hg consequences of H^ -C Aq . 
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The reflection principle RFNjji (II^-CAo) is the formalized statement “every 
Ilg sentence provable in II^-CAo is true”, or 

[Prni.cAo(</’) Tr((^)], 

where Pr is a standard formalized provability predicate and Tr is a truth defi¬ 
nition for Ilg sentences. Note that RFNjji (II^-CAo) implies Con(n 2 -CAo) and 
hence is unprovable in II^-CAo. 

Theorem 6.3. The following are equivalent over II^-CAo.' 

(1) all parity games are positionally determined, 

(2) Vx[(S°),-Det], 

(3) for every tree automaton A there exists a tree automaton B such that for 
any tree T, B accepts T exactly if A does not accept T, 

(4) there is a Turing machine t which halts on every input and accepts exactly 
the rig sentences of MSO true in ({0, Sq, S'!), 

(5) RFNni(n^CAo). 

Proof. Given Theorems 13.21 and 15.11 it is enough to prove (5) => (1) and (2) 

(5). We reason in II^-CAo. 

The implication from (5) to (1) is essentially immediate. Let (p{v) be a Ilg 
formula with free variable v stating that all parity games of index (0, x) are 
positionally determined. For each a; G N, let (px be the Ilg sentence obtained by 
substituting a canonical name (numeral) for x into p{v). By Lemma [4.6l we have 
Prni-CAo(</'o) and Pi'ni-CAoC’V?^ ^ + 1))“'), so also also Prni-CAo(‘/^^) 

for each a; G N. By (5), we obtain Tv{ipx) for each x, so indeed all parity games 
are positonally determined. 

Now assume (2) and consider a n| sentence <p of the form 

with if arithmetical, such that Pi'n^-CAo(‘/^o)- By Corollary 16.21 there is some 
a; G N such that VAT 3T VZ ip{X, Y, Z) is provable from ACAq -I- (S 2 )a;-Det. 

Assume that p is false. This means that there is some set S such that 
'iY3Z ^if{S,Y,Z). By Theorem 12.41 there is a countable coded /32-niodel M 
such that S £ M. Since M is a /32-niodel, we have 

M ^yY3Z^if{S,Y,Z). 

However, since both ACAq and true and have complexity no 

higher than n|, we also have 

M h ACAo a (S°)„-Det. 

Now, take the proof tt of VX '0(W, Y, Z) from ACAoA(S 2 )a;-Det. Since 

M is countable, we can express the statement “the y-ih. formula in tt is true in 
M” as an arithmetical formula T(y). By induction on y, T{y) holds for all y 
smaller than the length of tt. But the last formula in tt is VAT 3Y\IZ ip{X, Y, Z), 
so 

M \^'iX3Y'iZif{X,Y,Z), 

a contradiction. This proves (5). □ 
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7 Further work 


Determinacy As part of Theorem 16.31 we prove the equivalence of the deter- 
minacy principle Va;[(S 2 )a:"Det] and positional determinacy of all parity 
games. Our proof of this equivalence relies on the advanced techniques of 
m, goes through an intermediate step involving the reflection principle 
RFNni(n 2 -CAo), and requires II^-CAo as a base theory. 

Is there a simpler, more elementary proof of this equivalence with H^-CAq 
as the base theory? Is there a proof in ACAq? As a possibly easier question, 
does either of the implications in Corollary 13.31 reverse over ACAq? 

Biichi’s theorem Biichi’s Theorem states that nondeterministic word automata 
are closed under complementation (this implies the decidability of the 
MSO theory of (N, <)). Because ACAq proves that word automata can 
be determinized (cf. the proof of Theorem 13.2|) . also Biichi’s Theorem is 
provable within ACAq. However, what is the exact reverse-mathematical 
strength of the theorem? 

Weak MSO over the binary tree Can statements related to the decidabil¬ 
ity of the weak MSO theory of the infinite binary tree be characterized as 
determinacy principles, for instance as the determinacy of Boolean com¬ 
binations of open games? 

MSO theory over the reals R In [TB] it shown that the MSO theory of the 
real line with the natural ordering is undecidable. However, once the 
quantification is restricted to sets, the theory is decidable m- Is there 
a proof of this decidability result not relying on the full strength of Rabin’s 
theorem? 
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